← CVE Intelligence

CVE-2022-1905

Events Made Easy < 2.2.81 - Unauthenticated SQLi PUBLISHED

Description (CNA)

The Events Made Easy WordPress plugin before 2.2.81 does not properly sanitise and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injection

Affected (CNA)

Vendor / productVersions
Unknown / Events Made Easyaffected 2.2.81 before 2.2.81

CWE

CWE-89

References

ADP enrichment

CVE

No English description supplied.